
Error: rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
File: CnSFMuiB1snnnc8k0rhVt0IXuyc.mft (raw, json)
Hash identifier: qBFiwij9QEIRoUazXVbT+PEExcQu0pw0bYuiBZcCfMQ=
Subject key identifier: 9A:11:5E:1D:CB:D0:F3:C7:1E:2A:F5:8D:3D:39:F0:18:9C:90:57:30
Authority key identifier: 0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
Certificate issuer: /CN=F36B1D7CAF/serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Certificate serial: 0433
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
Manifest number: 042E
Signing time: Mon 28 Sep 2026 03:53:24 +0000
Manifest this update: Mon 28 Sep 2026 03:53:23 +0000
Manifest next update: Wed 30 Sep 2026 03:53:23 +0000
Files and hashes: 1: CnSFMuiB1snnnc8k0rhVt0IXuyc.crl (hash: lr5pRaa1pIL8dCag6KgUQ3Y6QTqkLW2DKsgU93DZk6g=)
2: 5169F5068C5D11EF8488F1B7762E951A.roa (hash: 3cIbtybco00gGUwMeF9svwUlqXkaL0afpvgvXFx0O/M=)
3: 9F32090A8B0811EFA689494F762E951A.roa (hash: 2AUAWCRuNhcHau5YalAF9O8N9cvhdsr8Y0YpuRghjHc=)
4: 1E081892E3AA11EF9553B073762E951A.roa (hash: LVZKWANNLcHHqjb6lqsGWMwIplye542XoApTsgYJWMU=)
5: DC0C04BE8B0A11EFB54E4F5D762E951A.roa (hash: 0gnOKw2+mTkWxgOLvtsIMggu6Ze48xgwwDEchAXSPdk=)
6: 901028E68B9211EF827732B9762E951A.roa (hash: gPIJu2/cPDtYI3hibOl12MUGNT8pAYS8BpbaLA7BUYY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1D7CAF, serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Validity
Not Before: Sep 28 03:53:23 2026 GMT
Not After : Sep 30 03:53:23 2026 GMT
Subject: CN=6ab9e4b4-9b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:c6:1d:5a:6d:dd:24:3b:f1:af:42:43:7e:
be:5d:42:9a:0e:04:7c:a7:5a:7c:ef:77:1d:5a:f0:
d9:b6:e5:70:e8:bd:18:09:21:88:e8:78:aa:d1:57:
69:18:4b:ab:11:34:0e:a8:17:26:2a:d3:71:71:49:
ab:bd:0f:7a:e0:d5:c6:41:2a:55:5f:c1:52:ac:e1:
51:70:6e:3e:61:3c:5f:3f:1a:7e:f3:50:6f:79:ff:
3d:4b:34:3f:51:f2:50:d2:0a:60:a9:1c:15:a5:ad:
a8:06:b1:95:59:de:91:27:00:24:86:40:a6:14:e9:
cf:ea:66:cd:af:2e:c1:1c:f0:c1:ad:05:d6:1e:78:
e1:b4:66:dd:01:3b:c6:dc:d9:06:fa:4c:6f:08:4b:
89:90:48:bf:20:44:6d:3d:08:da:5a:3d:13:b6:41:
85:3d:59:14:98:ef:00:77:a5:04:93:a9:3e:bf:fb:
97:e5:c4:d5:90:a5:73:1c:e2:bd:65:99:3a:0f:bf:
a5:24:f8:f8:d6:49:06:59:4a:a6:06:dd:a7:f0:46:
d7:57:40:3a:e4:2f:86:5f:f4:70:ae:35:67:ce:6f:
f5:08:19:5d:79:39:a1:9c:04:2e:aa:23:56:6d:9d:
ec:ec:f1:c0:fc:7c:ce:66:21:52:2b:46:ce:2e:d7:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:5E:1D:CB:D0:F3:C7:1E:2A:F5:8D:3D:39:F0:18:9C:90:57:30
X509v3 Authority Key Identifier:
keyid:0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:95:f6:a8:2b:c2:72:e6:a7:7d:d5:27:e7:3d:e0:2f:b7:62:
a3:47:e6:0f:01:0b:84:d5:3c:ac:de:d6:2a:1e:60:b5:f1:27:
45:6d:0d:54:87:22:10:a4:2c:ed:50:a8:bc:1e:d0:7a:70:c5:
9f:12:2c:40:59:fe:24:c9:9e:cd:d8:0c:91:7a:30:2d:0a:9b:
ba:12:8b:04:dc:27:c5:53:56:54:3a:1d:29:45:31:ca:bd:f3:
22:c1:c8:35:45:b4:12:28:49:df:05:fe:a0:09:88:30:35:63:
9e:79:fd:e8:87:09:4b:38:a8:66:8d:7c:3a:40:e3:c5:78:cf:
43:a2:ab:8a:e7:b9:38:fc:e8:cb:2e:2f:ab:38:c8:40:ad:73:
72:19:db:94:cf:14:9b:e1:93:73:f6:36:98:2e:8e:07:0b:6f:
d4:aa:85:6c:4b:6b:ae:ed:35:11:d8:ca:a7:e1:ac:3c:5c:81:
42:12:5c:47:c7:3b:0b:77:da:06:1e:0e:b8:18:f2:ad:11:0b:
f7:f0:46:70:1b:20:70:d4:82:ae:ae:a4:02:ec:34:1f:a4:2b:
c5:37:0c:ff:8d:57:d4:b7:78:9f:89:1a:a8:ef:5c:69:71:26:
ed:69:4e:5e:7b:8c:f4:e2:21:e1:4b:06:04:e3:18:bc:55:43:
73:dc:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:27:36 2026 by rpki-client